CVE-2018-14847 PoC — Winbox for MikroTik RouterOS 安全漏洞

Source

Associated Vulnerability

Title: Winbox for MikroTik RouterOS 安全漏洞 (CVE-2018-14847)
Description:MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

Description

Automated version of CVE-2018-14847 (MikroTik Exploit)

Readme

# MikroRoot
Automated version of CVE-2018-14847. It will scrape shodan for vulnerable host and then try to exploit them.

# How to use      
Note that this script will NOT run with Python2.x. Use only Python 3+       

MikroRoot:        
`python3 MikroRoot.py -k SHODAN_KEY -p page count`           
`User: ncss`        
`Pass: ncss!@#2018`     
`IP: 1.2.3.4`         

# Arguments       
**-p** page count to scrape       
**-k** Shodan key       
        
# Author of exploit    
**https://github.com/BasuCert/WinboxPoC**

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →